[Samba] Problem with Kerberos in Samba4

[Thomas Mueller]

Am Sat, 08 Dec 2012 18:03:31 +0100 schrieb Börje Johnsson:

> Hi
> 
> I have a problem when setting up samba4.
> The server is Ubuntu 12.04 and the version of samba is 4.0.0rc6. I use a
> clean install of samba.

built from git or installed with ubuntu packages?

> I think that samba is configured correctly according to the HOWTO.
> 
> Samba is provisioned like this:
> $ samba-tool domain provision --realm=hrm.local --domain=HRM
> --adminpass='xxxx' --server-role=dc
> 
> resolv.conf:
> domain hrm.local nameserver 172.20.10.19
> 
> Every test in the HOWTO works until Kerberos is tested:
> 
> $ kinit administrator at HRM.LOCAL kinit: Cannot contact any KDC for realm
> 'HRM.LOCAL' while getting initial credentials

did you actually start samba after the provision? (check: ps -C samba -f)

any messages in the samba.log file?

> 
> $ klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal:
> Administrator at SAMBA.EXAMPLE.COM
> 
> Valid starting       Expires              Service principal 2012-12-08
> 16:38:15  2012-12-09 02:38:15  krbtgt/
> SAMBA.EXAMPLE.COM at SAMBA.EXAMPLE.COM renew until 2012-12-15 16:38:15
> 2012-12-08 16:38:15  2012-12-09 02:38:15 
> LOCALADMEMBER$@SAMBA.EXAMPLE.COM

maybe a leftover from old tests? run "kdestroy" to clean up kerberos 
credentials cache.

- Thomas